Skip to content

California Delete Act / DROP: Independent third-party audits begin

Tech · Compliance deadlines · Sat, January 1, 2028 · California · US

Source

Beginning Jan 1, 2028 and every 3 years thereafter, data brokers must undergo an independent audit of Delete Act compliance. Not legal advice.

Every year

DateEventWhen
Jan 1, 2026California Delete Act / DROP: DROP opens to consumers9 mo ago
Jan 31, 2026California Delete Act / DROP: Annual data broker registration deadline8 mo ago
Aug 1, 2026California Delete Act / DROP: Data brokers must begin processing DROP deletion requests2 mo ago
Jan 31, 2027California Delete Act / DROP: Annual data broker registration deadlinein 4 mo
Jan 1, 2028California Delete Act / DROP: Independent third-party audits beginin 15 mo

Also on Jan 1, 2028

Source, method and history
Source
Regulations
How we know
From the Regulations API (regulations.fru.dev), which cites the official text.
Recurs
one-off
More on fru.dev
regulations.fru.dev
Feed
Subscribe to Compliance deadlines
Changes
  • 2026-09-25: added to 2028-01-01

Calendar by email

Sunday mornings: a look ahead at the week’s major dates, only when there are some.

Double opt-in. Unsubscribe any time.